Tone down security constraint on renewals upload to ROLE_USER from ROLE_ADMIN